Update dynamic group processing considerations#1986
Conversation
Added note about the impact of stale devices and users on dynamic group processing.
|
@mbhargav9 : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
Hi @mbhargav9 - This pull request was opened in the public repo. PMs should work in the private repo, per the Microsoft Docs contributor guide. We can keep this PR open for review and merge, but would you make future content updates in the private repo? Thank you! Can you review the proposed changes? Important: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
|
Learn Build status updates of commit 6107044: ✅ Validation status: passed
For more details, please refer to the build report. |
There was a problem hiding this comment.
Pull request overview
Adds guidance to the dynamic group processing article to call out that inactive/stale objects can increase evaluation workload and delay dynamic membership updates.
Changes:
- Adds a NOTE explaining that dynamic rules evaluate all users/devices, including inactive ones.
- Links readers to stale device and inactive user cleanup guidance.
| - **Rule configuration**: Certain rule configurations can affect processing time. For instance, the choice of inefficient operators like `Match`, `Contains`, or `memberOf` can increase processing time. Rule complexity is also a contributing factor. | ||
|
|
||
| > [!NOTE] | ||
| > Dynamic group rules evaluate every user and device in your tenant, including objects that are inactive or no longer in use. Stale devices and stale users can inflate group membership and slow down dynamic membership group processing. Before usin dynamic membership groups clean-up [stale devices](/entra/identity/devices/manage-stale-devices) and [inactive users](/entra/identity/monitoring-health/howto-manage-inactive-user-accounts) so your group reflects only the objects you intend to manage. |
|
Learn Build status updates of commit 161d7fd: ✅ Validation status: passed
For more details, please refer to the build report. |
Added note about the impact of stale devices and users on dynamic group processing.